When you recover and account will it make you change the email?

So... Something weird happened

I let someone use my account because I quit but then yesterday told him I'm gonna sell it, so I changed the password ( I didn't recover it) I just changed password normally and then I changed the email of the account

When he was on it he bought membership ( I'm assuming so he could try to recover himself?)

Maybe an hour later I try to login and the password is wrong... I do a reset password and I got the reset link in my email, so I change it again ( email is the same)
I go to login and now there's an authenticator on it??
I have remove the authenticator ( gets sent to my email still) and login and the account was just logged in 2 minutes ago ( so he was on it)

Is it possible he recovered it? Or does it make you set a new email when you recover an account?
Could he have changed the password another way through a linked social media or anything else?

 

the original owner will always be able to recover it, if your aren't the og owner it can always be recovered.

 

That doesn't answer the question lol

 

if u pay for membership with paypal/credit card or whatever methods there are, its pretty much guaranteed recovery.

 

Thanks, that helps
I think it's safe then. He must have sent an extra password recovery link to his email then I use that to change it or something...

Cause yea I was able to change the password normally still ( was sent to the email I had set)

 

i wouldnt keep anything on the account what u cant afford to lose, since im pretty sure if he paid for the membership with credit card for example, he is able to recover it back.